Xxe

2015-01-2216:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.5%

JSON

XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATT_DISPLAY_XMLSTRING_REMOTE, aka SAP Note 2016638.

CPENameOperatorVersion
netweaver_abaple7.31

CPE	Name	Operator	Version
	netweaver_abap	le	7.31

References

secunia.com/advisories/62469

erpscan.io/advisories/erpscan-15-001-sap-netweaver-ecatt_display_xmlstring_remote-xxe/

erpscan.io/press-center/blog/sap-critical-patch-update-january-2015/